ISSA - Sacramento Valley Chapter

ISSA Sacramento Valley Chapter Chapter Meeting - 11/22/2024 - Online Fraud
2024-11-22 11:30 - 13:00 (America/Los_Angeles) | CA
Online-only meeting. Zoom link: https://us06web.zoom.us/j/89687370483?pwd=[REDACTED]
Speaker: Dmitry Bezrukov

Topic: Online Fraud – A recent personal experience
Synopsis: This will be a lively discussion about the current state of online fraud based on Dmitry’s recent personal experience. He will review general stats, review specific case study, brainstorm what needs to be improved and what is the role of security industry in online fraud.
Speaker Bio: Dmitry has 17 years of experience in IT and cybersecurity. Many various experiences within IT security industry include NGFW management, SOC management protecting SaaS applications used by many top 200 Fortune companies and currently working in “Resilience” cybersecurity insurance and risk management company.
Meeting Details: This will be an online meeting only. Connect remotely via Zoom.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.

ISSA Sacramento Valley Chapter Meeting - 01/17/2025 - Building a Defensible Cybersecurity Budget
2025-01-17 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Building a Defensible Cybersecurity Budget

Security leaders often find that their budget requests must compete against other operational budget requests and arguably more productive uses of cash. Unless security leaders know how to communicate their budget needs according to the Money People’s business objectives, they may find themselves underfunded and underprepared to satisfy their organization’s security needs. This discussion will introduce key concepts that security leaders need to master to effectively produce a defensible cybersecurity budget to the Money People.

Robert D. Brown III BIO: Senior Director of Cyber Resilience
Rob Brown brings 25+ years of experience serving organizations from startups to government agencies and Fortune 100 companies as a senior strategic planner and decision science advisor across industry verticals such as telecommunication, electronics manufacturing, commercial real estate, oil & gas production, pharmaceuticals & biotech, logistics, aluminum manufacturing, and homeland security. Not only is he the author of Business Case Analysis with R – Simulation Tutorials to Support Complex Business Decisions (2018), he also contributed a chapter to How to Measure Anything in Cybersecurity Risk, 2nd Ed (Hubbard, Seiersen. 2023) and co-edited The Metric Manifesto: Confronting Security with Data (Seiersen. 2022). Rob holds a BS in Mechanical Engineering from the Georgia institute of Technology. Robert joined Resilience in 2022 with Richard Seiersen to help SMBs understand cyber risk quantification and elevate the practice of cyber security to a strategic level.

Defensible Cyber Budget
Resilience_Rapid Risk Interviews_111323
Ransomware Security Controls Assessment Tool v9.xlsm2.82 MBJanuary 22, 2025Downloads: 338Download

ISSA Sacramento Valley Chapter Meeting - 2/21/2025 - Stratoshark
2025-02-21 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Gerald Combs, Original developer of Wireshark

Topic: Stratoshark: Applying the power of Wireshark to System Calls and Logs
Synopsis: Wireshark offers powerful exploration, drill-down, and analysis capabilities for network packets, but what if those features could be applied to other types of data? Enter Stratoshark, a brand-new sibling application to Wireshark.
Stratoshark leverages the rich data sources provided by Falco’s libraries to enable deep analysis and troubleshooting across Linux servers, Kubernetes clusters, and any system that generates Linux system calls or real-time log events.
In this talk, Gerald will show how Stratoshark builds on open-source innovation to bring Wireshark’s intuitive interface to a broader range of use cases in cloud-native computing, including a live demo.
Speaker Bio: Gerald is the creator and lead developer of Wireshark and a 2016 ISSA Hall of Fame award recipient. He is the Director of Open Source Projects at Sysdig and CFO of the Wireshark Foundation.
Meeting Details: This is a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (link ) or attend in person at Capsity, 3810 Broadway, Sacramento CA (Google Maps and Directions).
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.

ISSA Sacramento Valley Chapter Meeting - 3/21/2025 - AI Assistant for the CMMC
2025-03-21 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Paul Grabow, Principal Advisor, Cybersecurity Grant Advisors LLC

Topic: AI assistants for the CMMC ecosystem
Synopsis: The DoD Cybersecurity Maturity Model Certification (CMMC) v2.0 program officially went live December 16, 2024. CMMC is required for all companies, over 300,000 of them, that are part of the DoD supply chain and handle Controlled Unclassified Information (CUI). In 2023, companies in California subject to CMMC received $41.2B in defense spending, ranked number 3 among states. CMMC is arguably the largest and most accelerated compliance regime to date in the US.
Paul is working on prototype AI assistants for roles in the CMMC ecosystem, including those defined by the CyberAB, which is the official accreditation body for the CMMC program. He would like the people attending this meeting to be a focus group to see the AI Assistants, think of queries, and provide feedback.
Check out the CyberAB website (https://cyberab.org/) to learn more about the CMMC (and all of the buzzwords).
Speaker Bio: Paul is Principal Advisor at Cybersecurity Grant Advisors, LLC.
Meeting Details: This is planned (if things go according to plan) to be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see link at top of this page that will be put there the week of the meeting) or attend in person at Capsity, 3810 Broadway, Sacramento CA (Google Maps and Directions). Note that the speaker strongly encourages people to attend in person, so that they can participate in the focus group.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in person at Capsity.
Here Zoom Meeting info if needed:
https://us06web.zoom.us/j/89292525445?pwd=[REDACTED]
Meeting ID: 892 9252 5445
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 4/18/2025 - Zero Trust
2025-04-18 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Surendra Narang, Senior Manager, Cyber Security, Palo Alto Networks
Topic: How to implement the Zero Trust security model
Synopsis: Due to the rise of sophisticated cyber threats and the erosion of traditional network boundaries due to cloud adoption and hybrid work, enterprises are increasingly embracing the Zero Trust security model. Unlike legacy perimeter-based approaches, Zero Trust is grounded in the principle of “never trust, always verify,” meaning that every user, device, and application must be continuously validated, regardless of location or network status.
Successful deployment of Zero Trust is not a one-time implementation but a strategic, iterative transformation that requires a methodical, multi-phase approach. It starts with a comprehensive assessment of the organization’s security posture, then identifying high-value assets, key user roles, and critical data flows. From there, enterprises implement granular, least-privilege access controls, adaptive authentication mechanisms, and continuous monitoring.
Speaker Bio: Surendra Narang is a seasoned cybersecurity leader with deep expertise and a strong focus on zero-trust architecture, security transformation, and enterprise-scale implementations. As Senior Manager of Cybersecurity at Palo Alto Networks, he led the end-to-end design and deployment of Zero Trust Security Architecture, embedding its core principles—least privilege access, continuous verification, and segmentation—into the fabric of the organization’s infrastructure and security products.
Meeting Details: This is a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (See information below) or attend in person at CapCity (see the address below).
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is a hybrid meeting on Zoom and in-person.
To join Zoom Meeting:
https://us06web.zoom.us/j/83647622654?pwd=[REDACTED]
Meeting ID: 836 4762 2654
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 5/16/2025 - Resilient AI Governance
2025-05-16 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Tolgay Kizilelma, PhD., Director of MS in Cybersecurity Program, Dominican University of California
Topic: From Crisis to Continuity: Building Resilient AI Governance
Synopsis: This presentation focuses on the critical transition from reactive incident management to building resilient systems supported by AI through effective governance. It addresses the growing need to strengthen AI systems to withstand challenges, navigate complex regulatory landscapes, and implement robust accountability mechanisms to ensure sustainable and reliable AI adoption.
Speaker Bio: Tolgay is a business-driven IT/Cybersecurity GRC leader with three decades of experience. He is the founding Director of the MSC program and teaches online Cybersecurity GRC courses as an Associate Professor of Cybersecurity in the Barowsky School of Business at DUC. Tolgay served as the CISO for multiple University of California campuses. He has more than 50 industry certifications, a B.S. degree in computer engineering, an MBA, and a Ph.D. focusing on infosec. He also volunteers for various non-profit organizations as a board member.
His contribution to the cybersecurity community was recognized with the 2022 C100 Award – Top 100 CISOs by CISOs Connect.
Meeting Details: This is planned (if things go according to plan) to be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in-person.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

June informal ISSA Sacramento social networking event over Zoom
2025-06-13 16:30 - 17:30 | CA
We have an informal ISSA Sacramento social networking event over Zoom.
The aim is: just to connect, get to know each other deeper, and ask your questions to other security industry colleagues.
Feel free to join us over Zoom Meeting:
Join Zoom Meeting
https://us06web.zoom.us/j/88079666701?pwd=[REDACTED]
Meeting ID: 880 7966 6701
Passcode: [REDACTED]
Find your local phone number: https://us06web.zoom.us/u/kc5SRpOE92

ISSA Sacramento Valley Chapter Meeting - 6/20/2025 - Secure Data Access
2025-06-20 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Brixton Pizzuti, Senior Solutions Architect at Elastic
Topic: Unlocking Data Access: Enhancing Security with Elastic Security
Synopsis: Gaining comprehensive access to data while ensuring its security is a critical challenge for state agencies and local government . We will explore the problem of secure data access and how Elastic Security can provide effective solutions. We will dive into the strategies for achieving visibility across all data sources and how to ensure robust protection against threats. Attendees will gain insights into leveraging Elastic Security to enhance their agencies data access capabilities while safeguarding sensitive information.
Speaker Bio: Brixton Pizzuti is a Senior Solutions Architect at Elastic, specializing in designing and implementing scalable solutions that empower State Agencies to harness the full potential of their data. With a deep expertise in Elastic’s suite of products followed with a background in Information Security, Brixton crafts tailored strategies that address complex business challenges, optimize data workflows, and enhance security measures.
Meeting Details: This will be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in-person.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 7/18/2025 - Custom AIs for Security
2025-07-18 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Steven Templeton
Topic: Beyond Chatbots: Building Custom AIs for Real-World Security and Education
Synopsis: Have you ever wondered how to do more with AI than just have it answer your homework or act as a smarter search engine?
In this talk, we’ll explore how to create task-specific AIs — using no-code tools like OpenAI’s Custom GPTs or low-code options like Python-based agents — and integrate them into workflows for security, education, and beyond. You’ll learn how to design prompts, connect models to your data, and even build agents that ask questions instead of just answering them.
We’ll also cover the key vocabulary you need to understand the AI landscape (terms like fine-tuning, embeddings, and RAG) and explain what makes different models tick — and why it matters. Along the way, I’ll share lessons from my own “Protecting Pandas Project,” where students interacted with an AI-powered game master as part of a cryptography course — a hands-on example of how AI can enable more scalable, consistent, and creative experiences.
Whether you’re a SOC analyst, AI tinkerer, or just AI-curious, this session will give you the language, tools, and ideas to get started with custom AI in your own domain.
And yes… this was written by an AI.
Speaker Bio: Steven Templeton is a cybersecurity consultant, educator, and former wildlife biologist who brings over 25 years of experience blending technology, security, and creativity. He holds a Ph.D. in Computer Security from UC Davis, has worked extensively in industrial control system (ICS) security and compliance, and currently teaches in the cybersecurity engineering graduate program at the University of San Diego. Steven has a knack for making complex ideas approachable — from machine learning to Splunk to AI-based roleplaying tools for cryptography students.
Meeting Details: This will be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in-person.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

ISSA Sacramento Valley *Thursday EVENING* Chapter Meeting - 8/14/2025 - HANDS-ON Create Custom AIs for Security
2025-08-14 19:00 - 21:00 | Zoom, on-line, Sacramento, United States
NOTE: This meeting will be held on a Thursday evening in lieu of our regular Friday lunch meeting.
The meeting is on-line only.
Speaker: Steven Templeton
Topic: Beyond Chatbots: Building Custom AIs for Real-World Security and Education
Synopsis:
In this hands-on presentation, we’ll create task-specific AIs using OpenAI’s Custom GPT builder. You’ll learn how to design prompts, connect models to your data, and even build agents that ask questions instead of just answering them.
Whether you’re a SOC analyst, AI tinkerer, or just AI-curious, this session will give you the language, tools, and ideas to get started with custom AI in your own domain.
Note: This talk is a follow-on to last month’s talk. See these slides to review (or discover, if you missed that meeting) the material and to prepare for this meeting. Also note that you will need an OpenAI ChatGPT Plus subscription to be able to create a GPT. The price is $20 for one month. See this web site to create your account.
Speaker Bio: Steven Templeton is a cybersecurity consultant, educator, and former wildlife biologist who brings over 25 years of experience blending technology, security, and creativity. He holds a Ph.D. in Computer Security from UC Davis, has worked extensively in industrial control system (ICS) security and compliance, and currently teaches in the cybersecurity engineering graduate program at the University of San Diego. Steven has a knack for making complex ideas approachable — from machine learning to Splunk to AI-based roleplaying tools for cryptography students.
Meeting Details: This will be an on-line only meeting (Zoom info below).
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is an on-line only meeting on Zoom.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 9/19/2025 - Risk Analysis: FAIR-U for Cyber
2025-09-19 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Mark Heckman, University of San Diego
Topic: Practicing “What-If” Risk Analysis Using the FAIR-U for Cyber Tool
Synopsis: This talk will explore the FAIR (Factor Analysis of Information Risk) model by demonstrating “what-if” risk analysis using the FAIR-U for Cyber tool. The FAIR-U for Cyber tool is a free demonstration version of SAFE Security’s SAFE ONE platform for automating FAIR risk analysis.
We will walk through an example risk scenario to see how the tool attempts to apply core FAIR components like Threat Event Frequency (TEF) and Loss Event Frequency (LEF). You can perform a basic “what-if” analysis by adjusting the parameters of various security controls. This will allow you to see how changes in things like a firewall’s capability or the use of multi-factor authentication might affect a scenario’s overall risk.
The goal of this presentation is to give you a sense of how a quantitative model like FAIR can be used to inform discussions about where to apply security resources. We’ll also consider some of the tool’s nuances and limitations, including its distinction between calculated risk values and those intended for easier communication.
Speaker Bio: Mark Heckman, PhD, has worked in the field of information security for over 40 years as an engineer, researcher, practitioner and educator. His wide-ranging career has spanned many areas of information security, including research and development of very high-assurance, multi-level secure systems for use in government and the military, research and development of intrusion detection and security event management systems, and general IT security and compliance for commercial organizations in the financial and health industries.
Dr. Heckman earned his MS and PhD degrees in Computer Science at the University of California, Davis and is a Certified Information Systems Security Professional (CISSP). He is currently a professor of practice and teaches in the CyberSecurity Engineering and Technology program at the University of San Diego.
Meeting Details: This will be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in-person.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 10/17/2025 - Reliable SaaS Backup
2025-10-17 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Ryan Block, Solution Engineer/Account Executive and Joy Bryant, Strategic Account Executive
Topic: SaaS Backup for Business-Critical Data Protection
Synopsis: Spanning Backup provides automated, reliable cloud-to-cloud backup and restore solutions for Google Workspace, Microsoft 365 and Salesforce – helping organizations protect their business-critical data from loss due to user error, malicious activity, or ransomware.
Speaker Bio: Ryan Block, Solution Engineer/Account Executive based in Boston, MA, has been with Kaseya/Datto since 2016. Joy Bryant, Strategic Account Executive, based in Connecticut, has been with Kaseya/Datto for 4 years.
Meeting Details: This will be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in-person.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 11/21/2025 - What is "AI Security"?
2025-11-21 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Steven Templeton, Ph.D.
Topic: What is “AI Security” and How Can You Demonstrate That You Know It?
Synopsis: A recent casual scan of cyber security job listings showed that about 40% of them ask for experience in “AI Security”. That percentage is sure to increase. If you want to find a new job (or keep your current one), you need to know about “AI Security”. But what exactly is it? How can you demonstrate to an employer that you know how to do it (and how can you explain it to management, who put buzz words like that into their job listings but don’t really know what it is themselves)?
Speaker Bio: Steven Templeton is a cybersecurity consultant, educator, and former wildlife biologist who brings over 25 years of experience blending technology, security, and creativity. He holds a Ph.D. in Computer Security from UC Davis, has worked extensively in industrial control system (ICS) security and compliance, and currently teaches in the cybersecurity engineering graduate program at the University of San Diego. Steven has a knack for making complex ideas approachable — from machine learning to Splunk to AI-based roleplaying tools for cryptography students.
Meeting Details: This will be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA. Lunch will be provided to in-person attendees.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in-person.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 1/16/2026 - Cybersecurity Forecast 2026
2026-01-16 11:30 - 13:00 | Capsity, 3808 Broadway, Sacramento CA, Capsity, 3808 Broadway, Sacramento, CA, United States
Speaker: Zach Coker
Topic: Preparing for Threats to Come: Cybersecurity Forecast 2026 (Slides)
Synopsis: Every November, Google Cloud Security aims to equip organizations with the knowledge needed to stay ahead of threats it anticipates in the coming year. The Cybersecurity Forecast 2026 report provides comprehensive insights to help security leaders and teams prepare for those challenges. Google’s Zach Coker will give us a summary of the chief threats that Google Cloud Security anticipates our organizations will face in 2026.
Speaker Bio: Zachary Coker is a Security Customer Engineer for Google Public Sector. He specializes in guiding state, local, and education clients through the Google Cloud Security portfolio.
His career began in the US Navy as a Cryptologic Technician, supporting the National Security Agency. Prior to his current role, Zach served as a Mandiant MDR Consultant, where he provided incident response services and delivered threat intelligence briefings.
Zach holds a Master of Science in Management Information Systems (MS-MIS) from Florida State University, as well as several Google Cloud certifications, Certified Incident Handler (GCIH), and Penetration Tester (GPEN). He lives in Lincoln, CA with his wife and two sons.
Meeting Details: This will be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA. Lunch will be provided to in-person attendees.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
This is hybrid meeting on Zoom and in-person.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]

ISSA Sacramento Valley Chapter Meeting - 2/20/2026 - Future State Cybersecurity Program
2026-02-20 11:30 - 13:00 | ISSA Chapter Meeting, On-Line, via Zoom, CA, United States
THIS IS AN ON-LINE ONLY MEETING. (We could not secure a meeting location.)
Speaker: Paul Grabow, Principal Advisor, Cybersecurity Grant Advisors LLC
Topic: Towards a Future State Cybersecurity Program (Public Sector Edition)
Synopsis: Many public sector programs are still fighting today’s attacks with yesterday’s operating models. Paul Grabow will outline a near‑term, achievable future‑state model for public sector cybersecurity that fully leverages NLP, ML, generative AI, and semi‑autonomous agents, backed by strong governance and leadership. He’ll connect emerging AI‑driven tools with frameworks like NIST NICE, CSF, and ISO 27001, and highlight the leadership, structural, and vendor‑risk changes needed to make it real.
Public sector CISOs, program managers, and consultants will leave with a notional Future State Program and potential approaches to start modernizing their programs before the next budget and threat cycle hits. They will also be invited to work collaboratively to refine the Future State Program concept.
Speaker Bio: Paul is a principal cybersecurity professional with a decades long career evaluating, defining, advocating, and driving policies, programs, processes, strategies, and technologies to advance cybersecurity, strengthen the resiliency of computing ecosystems, increase awareness of threats, and manage risk factors across environments.
His background includes information security leadership positions for the US Senate, Office of the Sergeant At Arms and staff positions with the Board of Governors, Federal Reserve System. Additionally, along with work at the Judicial Council of California and contract for a State of California startup agency, he may be the first (and at this point in time only) person in this field who has worked in all three branches of government! He also helped brainstorm the concept of a Federal Scholarship for Service program while serving in the White House PCAST working group.
He is currently working on how to incorporate AI technologies into the infosec/cybersecurity profession at the strategic/tactical/operational levels. He asks you to “Please contact me for further information and how we may collaborate in this technology!”
Meeting Details: This is an on-line meeting only. See the Zoom link below.
This will be a hybrid meeting (both in-person and on-line). You may attend remotely via Zoom (see below) or attend in person at Capsity, 3808 Broadway, Sacramento CA. Lunch will be provided to in-person attendees.
Please register for the meeting below.
You don’t have to be a member of ISSA to attend our meetings (but we encourage you to join us!). Please share information about this meeting with your friends and colleagues who have an interest in information security.
Zoom link:
https://us06web.zoom.us/j/84186623031?pwd=[REDACTED]
Meeting ID: 841 8662 3031
Passcode: [REDACTED]
